Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iu9lIUgneAriEgTN70RxC589XJc.roa
File:                     Iu9lIUgneAriEgTN70RxC589XJc.roa (raw, json)
Hash identifier:          L9pxoy1Xoi4hn5fAoMrHqVp1a9WEhrR/ScDl19FL48c=
Subject key identifier:   22:EF:65:21:48:27:78:0A:E2:12:04:CD:EF:44:71:0B:9F:3D:5C:97
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       A6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iu9lIUgneAriEgTN70RxC589XJc.roa
Signing time:             Fri 22 Jul 2022 08:11:48 +0000
ROA not before:           Fri 22 Jul 2022 08:11:48 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:11:48 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=22EF65214827780AE21204CDEF44710B9F3D5C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:38:5e:42:51:63:31:bf:a5:ce:04:53:67:
                    3b:42:ce:c1:12:73:12:5e:a6:55:77:d1:2f:bd:c3:
                    9f:fe:91:26:b2:6c:37:37:82:13:f5:a5:eb:02:0f:
                    33:86:43:87:6d:51:d7:59:76:53:27:9f:36:22:e2:
                    11:c9:c4:3d:62:09:26:54:db:38:e4:2a:a0:15:4b:
                    9e:63:3a:d1:77:bc:f7:c4:04:ad:fd:0b:26:b9:bf:
                    e9:ac:a3:13:78:de:2a:4b:3a:b7:c1:f1:e2:ad:dd:
                    93:fa:4b:d3:b0:ef:42:da:e8:29:20:d5:47:90:12:
                    5a:3e:96:a8:84:f6:c8:a7:83:f5:a1:1b:6b:92:f5:
                    79:d8:43:1a:53:fd:cc:d8:c9:3b:a2:e0:80:25:10:
                    e3:49:93:87:06:b7:2d:0c:ff:89:91:a9:ba:71:07:
                    cd:3c:a3:33:cc:7b:c6:3a:fd:01:f7:63:1f:cb:4a:
                    1b:1d:0a:47:5b:34:26:8c:72:5f:b7:76:7a:1b:41:
                    86:8e:63:2a:ed:49:5e:a7:1a:f9:f4:70:93:6c:37:
                    78:85:0a:d4:fe:ff:d7:ca:d8:1e:a6:54:ab:df:63:
                    15:8b:7c:5d:39:64:35:99:30:67:4e:c0:ab:7a:7c:
                    00:a3:15:3d:d0:74:82:04:cd:68:42:e9:6d:d8:2c:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EF:65:21:48:27:78:0A:E2:12:04:CD:EF:44:71:0B:9F:3D:5C:97
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Iu9lIUgneAriEgTN70RxC589XJc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:53:cc:bf:3f:e0:3f:48:46:f1:85:35:f0:9a:93:82:7f:21:
         c5:49:4f:8e:57:1e:e0:c8:29:d6:6d:b3:ff:e4:7a:57:c4:a5:
         fb:c0:87:2f:36:ce:e1:93:08:ee:f2:2b:55:6c:2f:bc:0e:2b:
         48:17:e4:a8:69:31:b2:d8:3a:ba:d0:f2:59:e4:67:1d:b3:37:
         c0:91:51:6a:70:bb:8c:ee:37:82:9a:e4:9f:69:79:a1:f7:cd:
         12:4d:61:6c:7d:45:b3:ee:f6:f4:e5:fe:de:2b:8a:ef:80:5d:
         a3:78:18:fe:fe:2c:0a:e0:9a:19:a1:4c:58:04:bd:6e:76:f8:
         e5:13:92:6f:f1:6c:b2:ac:44:4c:e8:55:65:2a:8c:1c:62:38:
         1a:c5:d5:8e:c8:fc:4b:16:3f:ee:52:a1:c2:bf:ff:b4:10:86:
         93:83:2d:43:3c:dd:6d:70:75:15:ed:a6:4e:2e:22:b0:c9:e3:
         4d:d5:3c:8d:da:db:9e:6e:71:0b:c1:ac:96:f4:d8:c6:16:11:
         23:89:e5:e7:b9:b7:4c:5c:a0:94:a5:52:0c:c2:be:f3:d2:b7:
         9c:7c:7f:5d:e3:60:7b:3d:8e:23:8b:74:51:30:35:13:1a:12:
         b8:c8:f2:68:b5:e0:b8:25:8e:4d:69:3c:34:12:71:99:59:f2:
         fc:80:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org